diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
index 013e7f1..8964735 100644
--- a/.github/workflows/deploy.yml
+++ b/.github/workflows/deploy.yml
@@ -17,7 +17,7 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v3
       - name: Decrypt .env
-        run: gpg --quiet --batch --yes --decrypt --passphrase="${SECRET}" --output .env .env.enc
+        run: gpg --quiet --batch --yes --decrypt --passphrase="${{ env.SECRET }}" --output .env .env.enc
       - name: Load .env
         uses: aarcangeli/load-dotenv@v1.0.0
         with:
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 75c5cd9..2117f34 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -1,4 +1,4 @@
-name: publish-branded
+name: publish
 on:
   repository_dispatch:
     types: [trigger-ocelot-build-success]
@@ -17,7 +17,7 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@v3
       - name: Decrypt .env
-        run: gpg --quiet --batch --yes --decrypt --passphrase="${SECRET}" --output .env .env.enc
+        run: gpg --quiet --batch --yes --decrypt --passphrase="${{ env.SECRET }}" --output .env .env.enc
       - name: Load .env
         uses: aarcangeli/load-dotenv@v1.0.0
         with:
@@ -65,13 +65,14 @@ jobs:
     runs-on: ubuntu-latest
     needs: [build_branded]
     env:
+      SECRET: ${{ secrets.SECRET }}
       DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
       DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
     steps:
       - name: Checkout code
         uses: actions/checkout@v3
       - name: Decrypt .env
-        run: gpg --quiet --batch --yes --decrypt --passphrase="${SECRET}" --output .env .env.enc
+        run: gpg --quiet --batch --yes --decrypt --passphrase="${{ env.SECRET }}" --output .env .env.enc
       - name: Load .env
         uses: aarcangeli/load-dotenv@v1.0.0
         with: